AWS adapter (STUB). Mapping, same ports, no core changes:
EventStore -> DynamoDB table secgenix-events (pk=tenantId, sk=at#id) + secgenix-policies, secgenix-receipts
BundleStore -> S3 bucket secgenix-bundles fronted by CloudFront (or DynamoDB item per tenant)
Notifier -> SNS topic secgenix-bundle-published fanning out to SQS per edge fleet
Runtime: the same router (router.ts) wrapped by a Lambda handler behind API Gateway HTTP API.
Not implemented in the MVP: wiring requires the AWS SDK v3 clients and IAM roles defined in
infra/terraform/aws. Every method throws so a misconfigured deploy fails loudly, never silently.
AWS adapter (STUB). Mapping, same ports, no core changes: EventStore -> DynamoDB table
secgenix-events(pk=tenantId, sk=at#id) +secgenix-policies,secgenix-receiptsBundleStore -> S3 bucketsecgenix-bundlesfronted by CloudFront (or DynamoDB item per tenant) Notifier -> SNS topicsecgenix-bundle-publishedfanning out to SQS per edge fleet Runtime: the same router (router.ts) wrapped by a Lambda handler behind API Gateway HTTP API. Not implemented in the MVP: wiring requires the AWS SDK v3 clients and IAM roles defined in infra/terraform/aws. Every method throws so a misconfigured deploy fails loudly, never silently.